Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20378cb-b6db-464a-b796-71ebb9cdcba4/298baa211045a8e2be05ab2d5f2e3594f5d83707.mft
File:                     298baa211045a8e2be05ab2d5f2e3594f5d83707.mft (raw, json)
Hash identifier:          MzmcXdLQE8BDgSOPr17Uy+2t1RwTHvQlDehmYubIrmY=
Subject key identifier:   20:C3:D2:F2:B1:B0:E8:54:98:5D:5A:0F:75:60:32:46:A4:35:0D:F5
Authority key identifier: 09:16:10:32:05:AF:B5:2F:CD:D1:6A:9D:C7:EF:4C:C2:9D:DE:53:4D
Certificate issuer:       /CN=298baa211045a8e2be05ab2d5f2e3594f5d83707
Certificate serial:       023D56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/298baa211045a8e2be05ab2d5f2e3594f5d83707.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20378cb-b6db-464a-b796-71ebb9cdcba4/298baa211045a8e2be05ab2d5f2e3594f5d83707.mft
Manifest number:          012B
Signing time:             Mon 15 Apr 2024 06:22:00 +0000
Manifest this update:     Mon 15 Apr 2024 05:20:39 +0000
Manifest next update:     Thu 18 Apr 2024 07:22:39 +0000
Files and hashes:         1: 298baa211045a8e2be05ab2d5f2e3594f5d83707.crl (hash: hfBpUDEyCeDmD4NfCqLVj9H63bd67WdTdhsNfxEbP+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 146774 (0x23d56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=298baa211045a8e2be05ab2d5f2e3594f5d83707
        Validity
            Not Before: Apr 15 05:20:39 2024 GMT
            Not After : Apr 18 07:22:39 2024 GMT
        Subject: CN=ff1ddae455c47660c20c13caccf6d02a2ca2461a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:2a:c3:34:a5:99:5a:f6:71:13:21:32:1b:80:
                    26:c8:aa:9d:74:d1:fb:dd:1d:87:07:2d:7c:6e:07:
                    e0:66:55:a1:75:6e:c2:36:cc:8b:07:37:8d:c0:ee:
                    84:08:7d:db:33:4f:8b:91:51:c0:c5:8f:d5:ae:89:
                    88:fb:b0:e7:60:0f:bb:ac:8f:bc:2e:23:c7:73:73:
                    fb:3d:9a:82:49:07:0f:19:14:3c:cb:6b:bb:ad:13:
                    f1:8d:5d:04:fa:a8:41:e6:db:ab:13:03:ad:8d:3e:
                    a5:b9:a1:0f:e0:4a:3f:be:16:c8:c3:8e:d7:24:53:
                    d0:2f:d6:6b:7a:c7:b7:d6:82:7e:1d:28:36:a5:7a:
                    3b:56:db:a9:50:83:04:bc:98:fe:70:8a:76:5f:d3:
                    6c:51:bb:03:0f:78:d2:fb:31:04:9e:89:2b:f9:87:
                    69:dd:13:ec:fb:8e:fd:c1:71:4d:3a:a9:a6:cf:5b:
                    64:e9:77:63:a7:32:8b:92:46:a3:f9:94:36:7a:34:
                    d6:68:a9:a7:0f:0c:72:5b:35:c0:72:9b:47:87:eb:
                    80:3e:b8:07:cf:e5:eb:be:40:47:47:57:72:8f:98:
                    af:f8:d5:57:08:27:00:96:e1:20:86:9b:cb:93:a2:
                    09:f5:f0:ed:88:f3:11:b7:37:e6:92:d0:cd:08:d1:
                    1c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C3:D2:F2:B1:B0:E8:54:98:5D:5A:0F:75:60:32:46:A4:35:0D:F5
            X509v3 Authority Key Identifier:
                keyid:09:16:10:32:05:AF:B5:2F:CD:D1:6A:9D:C7:EF:4C:C2:9D:DE:53:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/298baa211045a8e2be05ab2d5f2e3594f5d83707.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20378cb-b6db-464a-b796-71ebb9cdcba4/298baa211045a8e2be05ab2d5f2e3594f5d83707.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20378cb-b6db-464a-b796-71ebb9cdcba4/298baa211045a8e2be05ab2d5f2e3594f5d83707.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:14:62:23:99:dc:4e:44:ba:8a:b7:9c:af:d5:a9:96:9b:02:
         ec:e1:7f:bb:a0:91:55:0a:00:44:9e:4d:fb:29:f2:2c:99:fc:
         f8:f0:46:d7:3d:2c:91:ab:3c:bd:01:65:69:43:b6:dd:17:27:
         c7:de:b8:35:a9:93:3b:21:0d:93:38:7f:a0:ee:5b:3e:01:43:
         ee:ec:be:9e:f0:1f:88:af:51:ac:f9:84:9d:6f:98:b8:ef:48:
         2f:39:82:6b:a1:20:dc:83:27:86:e2:2e:f5:56:ce:74:fd:49:
         21:f6:ba:ac:f5:40:12:30:4f:64:d2:8d:b8:76:68:a0:40:97:
         b7:5c:29:e0:9a:ac:5e:b1:8a:5b:48:83:40:b9:4f:5a:64:13:
         7e:b2:73:e8:89:61:5a:80:09:b8:7d:d3:5d:e5:e3:a1:93:a4:
         c5:e0:29:fb:af:64:1b:45:aa:ac:3c:cc:71:ca:33:6b:37:25:
         2e:72:6b:55:cd:47:9c:05:e3:9e:d6:56:bb:5a:d5:b1:e1:9b:
         24:94:35:21:66:3d:fe:36:81:e0:5a:6a:06:c5:96:d6:c4:b1:
         d3:ce:8e:ed:0b:db:41:3c:e2:61:1c:4a:6d:e7:d2:9d:3c:0e:
         15:67:df:b5:0b:2d:15:8f:ef:63:91:1c:84:4b:c9:3d:7d:08:
         2a:7e:1d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----